An evaluation on KNN-SVM algorithm for detection and prediction of DDoS attack

• Main Authors: Yusof, Ahmad Riza’ain, Udzir, Nur Izura, Selamat, Ali
• Other Authors: Fujita, Hamido
• Format: Book Section
• Language: English
• Published: Springer 2016
• Online Access: http://psasir.upm.edu.my/id/eprint/52677/1/An%20evaluation%20on%20KNN-SVM%20algorithm%20for%20detection%20and%20prediction%20of%20DDoS%20attack.pdf; http://psasir.upm.edu.my/id/eprint/52677/; https://www.researchgate.net/publication/305315176_An_Evaluation_on_KNN-SVM_Algorithm_for_Detection_and_Prediction_of_DDoS_Attack

Recently, damage caused by DDoS attacks increases year by year. Along with the advancement of communication technology, this kind of attack also evolves and it has become more complicated and hard to detect using flash crowd agent, slow rate attack and also amplification attack that exploits a vulnerability in DNS server. Fast detection of the DDoS attack, quick response mechanisms and proper mitigation are a must for an organization. An investigation has been performed on DDoS attack and it analyzes the details of its phase using machine learning technique to classify the network status. In this paper, we propose a hybrid KNN-SVM method on classifying, detecting and predicting the DDoS attack. The simulation result showed that each phase of the attack scenario is partitioned well and we can detect precursors of DDoS attack as well as the attack itself.